npm - @steedos/accounts - Versions diffs - 2.2.52-beta.4 → 2.2.52-beta.44 - Mend

@steedos/accounts 2.2.52-beta.4 → 2.2.52-beta.44

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (95) hide show

package/LICENSE.txt +2 -5
package/lib/core/index.js +22 -22
package/lib/core/index.js.map +1 -1
package/lib/database-mongo/mongo.js +105 -102
package/lib/database-mongo/mongo.js.map +1 -1
package/lib/index.js +11 -23
package/lib/index.js.map +1 -1
package/lib/mail.js +5 -5
package/lib/mail.js.map +1 -1
package/lib/password/accounts-password.js +54 -41
package/lib/password/accounts-password.js.map +1 -1
package/lib/password/index.js +1 -1
package/lib/password/index.js.map +1 -1
package/lib/password/utils/encryption.js +3 -3
package/lib/rest-express/endpoints/authorize.js +2 -2
package/lib/rest-express/endpoints/get-user.js +2 -2
package/lib/rest-express/endpoints/impersonate.js +2 -2
package/lib/rest-express/endpoints/initServer.js +2 -2
package/lib/rest-express/endpoints/login.js +2 -2
package/lib/rest-express/endpoints/logout.js +2 -2
package/lib/rest-express/endpoints/oauth/provider-callback.js +3 -3
package/lib/rest-express/endpoints/oauth/provider-callback.js.map +1 -1
package/lib/rest-express/endpoints/password/change-password.js +2 -2
package/lib/rest-express/endpoints/password/register.js +2 -2
package/lib/rest-express/endpoints/password/reset.js +4 -4
package/lib/rest-express/endpoints/password/two-factor.js +6 -6
package/lib/rest-express/endpoints/password/verify-email.js +6 -6
package/lib/rest-express/endpoints/password/verify.js +4 -4
package/lib/rest-express/endpoints/put-user-name.js +2 -2
package/lib/rest-express/endpoints/refresh-access-token.js +2 -2
package/lib/rest-express/endpoints/service-authenticate.js +2 -2
package/lib/rest-express/endpoints/spaces.js +2 -2
package/lib/rest-express/endpoints/steedos/create-tenant.js +2 -2
package/lib/rest-express/endpoints/steedos/get-tenant.js +2 -2
package/lib/rest-express/endpoints/steedos/settings.js +2 -2
package/lib/rest-express/endpoints/update-session.js +2 -2
package/lib/rest-express/express-middleware.js +1 -1
package/lib/rest-express/express-middleware.js.map +1 -1
package/lib/rest-express/user-loader.js +2 -2
package/lib/rest-express/utils/steedos-auth.js +2 -2
package/lib/rest-express/utils/steedos-auth.js.map +1 -1
package/lib/rest-express/utils/users.js +4 -4
package/lib/server/accounts-server.js +56 -30
package/lib/server/accounts-server.js.map +1 -1
package/lib/server/utils/email.js +2 -2
package/lib/types/index.js +14 -14
package/lib/types/index.js.map +1 -1
package/package.json +12 -16
package/src/core/index.ts +4 -4
package/src/database-mongo/mongo.ts +29 -26
package/src/index.ts +7 -19
package/src/mail.ts +3 -3
package/src/password/accounts-password.ts +17 -5
package/src/server/accounts-server.ts +26 -3
package/src/server/types/jwt-data.ts +10 -1
package/src/types/types/connection-informations.ts +9 -0
package/lib/oauth2/client.js +0 -1
package/lib/oauth2/client.js.map +0 -1
package/lib/oauth2/config.js +0 -14
package/lib/oauth2/config.js.map +0 -1
package/lib/oauth2/consent.js +0 -192
package/lib/oauth2/consent.js.map +0 -1
package/lib/oauth2/login.js +0 -166
package/lib/oauth2/login.js.map +0 -1
package/lib/oauth2/logout.js +0 -60
package/lib/oauth2/logout.js.map +0 -1
package/lib/oauth2/stub/oidc-cert.js +0 -67
package/lib/oauth2/stub/oidc-cert.js.map +0 -1
package/lib/saml-idp/config.js +0 -82
package/lib/saml-idp/config.js.map +0 -1
package/lib/saml-idp/connectedApps.js +0 -20
package/lib/saml-idp/connectedApps.js.map +0 -1
package/lib/saml-idp/express-middleware.js +0 -684
package/lib/saml-idp/express-middleware.js.map +0 -1
package/lib/saml-idp/index.js +0 -13
package/lib/saml-idp/index.js.map +0 -1
package/lib/saml-idp/simpleProfileMapper.js +0 -75
package/lib/saml-idp/simpleProfileMapper.js.map +0 -1
package/src/oauth2/client.ts +0 -0
package/src/oauth2/config.ts +0 -15
package/src/oauth2/consent.ts +0 -208
package/src/oauth2/login.ts +0 -179
package/src/oauth2/logout.ts +0 -66
package/src/oauth2/stub/oidc-cert.ts +0 -86
package/src/saml-idp/config.js +0 -85
package/src/saml-idp/connectedApps.ts +0 -16
package/src/saml-idp/express-middleware.js +0 -811
package/src/saml-idp/index.ts +0 -14
package/src/saml-idp/simpleProfileMapper.js +0 -82
package/src/saml-idp/views/error.hbs +0 -11
package/src/saml-idp/views/layout.hbs +0 -72
package/src/saml-idp/views/samlresponse.hbs +0 -20
package/src/saml-idp/views/settings.hbs +0 -175
package/src/saml-idp/views/user.hbs +0 -261
package/views/oauth2/consent.pug +0 -141

package/src/saml-idp/index.ts DELETED Viewed

@@ -1,14 +0,0 @@
-import { samlIdp } from './express-middleware';
-import { spawn } from 'child_process';
-const { connectedApps } = require("./connectedApps");
-const issuer = process.env.ROOT_URL?process.env.ROOT_URL:'http://127.0.0.1:4000/';
-const app = connectedApps["salesforce"];
-// samlIdp.run({
-//   issuer: app.issuer,
-//   acsUrl: app.acsUrl,
-//   audience: app.audience,
-// });
-export default samlIdp.expressMiddleware;

package/src/saml-idp/simpleProfileMapper.js DELETED Viewed

@@ -1,82 +0,0 @@
-function SimpleProfileMapper (pu) {
-  if(!(this instanceof SimpleProfileMapper)) {
-    return new SimpleProfileMapper(pu);
-  }
-  this._pu = pu;
-}
-SimpleProfileMapper.fromMetadata = function (metadata) {
-  function CustomProfileMapper(user) {
-    if(!(this instanceof CustomProfileMapper)) {
-      return new CustomProfileMapper(user);
-    }
-    SimpleProfileMapper.call(this, user);
-  }
-  CustomProfileMapper.prototype = Object.create(SimpleProfileMapper.prototype);
-  CustomProfileMapper.prototype.metadata = metadata;
-  return CustomProfileMapper;
-}
-SimpleProfileMapper.prototype.getClaims = function() {
-  var self = this;
-  var claims = {};
-  this.metadata.forEach(function(entry) {
-    claims[entry.id] = entry.multiValue ?
-      self._pu[entry.id].split(',') :
-      self._pu[entry.id];
-  });
-  return Object.keys(claims).length && claims;
-};
-SimpleProfileMapper.prototype.getNameIdentifier = function() {
-  return {
-    nameIdentifier:                  this._pu.username,
-    nameIdentifierFormat:            this._pu.nameIdFormat,
-    nameIdentifierNameQualifier:     this._pu.nameIdNameQualifier,
-    nameIdentifierSPNameQualifier:   this._pu.nameIdSPNameQualifier,
-    nameIdentifierSPProvidedID:      this._pu.nameIdSPProvidedID
-  };
-};
-SimpleProfileMapper.prototype.metadata = [ {
-  id: "firstName",
-  optional: false,
-  displayName: 'First Name',
-  description: 'The given name of the user',
-  multiValue: false
-}, {
-  id: "lastName",
-  optional: false,
-  displayName: 'Last Name',
-  description: 'The surname of the user',
-  multiValue: false
-}, {
-  id: "name",
-  optional: true,
-  displayName: 'Name',
-  description: 'The display name of the user',
-  multiValue: false
-}, {
-  id: "email",
-  optional: false,
-  displayName: 'E-Mail Address',
-  description: 'The e-mail address of the user',
-  multiValue: false
-},{
-  id: "mobilePhone",
-  optional: true,
-  displayName: 'Mobile Phone',
-  description: 'The mobile phone of the user',
-  multiValue: false
-}, {
-  id: "groups",
-  optional: true,
-  displayName: 'Groups',
-  description: 'Group memberships of the user',
-  multiValue: true
-}];
-module.exports = SimpleProfileMapper;

package/src/saml-idp/views/error.hbs DELETED Viewed

@@ -1,11 +0,0 @@
-<div id="container">
-	<h1>{{message}}</h1>
-	<h2>{{error.status}}</h1>
-	<pre>{{error.stack}}</pre>
-  <div class="col-md-12 text-right">
-    <form action="/" method="get">
-      <button id="btn-return" class="btn btn-primary input-xlarge" type="submit"><i class="fa fa-home"><span>Restart</span></i></button>
-    </form>
-  </div>
-</div>

package/src/saml-idp/views/layout.hbs DELETED Viewed

@@ -1,72 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8">
-    <meta http-equiv="X-UA-Compatible" content="IE=edge">
-    <meta name="viewport" content="width=device-width, initial-scale=1">
-    <title>Steedos Identity Provider</title>
-    <link href="/dist/fontawesome/css/font-awesome.css" rel="stylesheet">
-    <link href="/accounts/a/css/bootstrap.css" rel="stylesheet">
-    <link href="/accounts/a/css/main.css" rel="stylesheet">
-    <!--[if lt IE 9]>
-      <script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
-      <script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
-    <![endif]-->
-  </head>
-  <body>
-    <!-- Static navbar -->
-    <nav class="navbar navbar-default">
-      <div class="container-fluid">
-        <div class="navbar-header">
-        <a class="navbar-brand" href="/accounts/saml/metadata"><i class="fa fa-key"><span>Steedos SAML Identity Provider ({{idp.issuer}})</span></i></a>
-        </div>
-        <div id="navbar" class="navbar-collapse collapse">
-          <ul class="nav navbar-nav navbar-left">
-            <li><a href="/accounts/saml/metadata"><i class="fa fa-file-code-o"><span>IdP Metadata</span></i></a></li>
-          </ul>
-          <ul class="nav navbar-nav navbar-right">
-            <li><a href="/accounts/saml/signout"><i class="fa fa-sign-out"><span>New Session</span></i></a></li>
-            <li class="active"><a href="/accounts/saml/settings"><i class="fa fa-cog"><span>Settings</span></i></a></li>
-          </ul>
-        </div><!--/.nav-collapse -->
-    </nav>
-    <div class="container">
-      <div class="row">
-        {{{body}}}
-      </div>
-    </div>
-  </body>
-  <script src="/dist/jquery/jquery.min.js"></script>
-  <script src="/dist/jquery-validation/jquery.validate.min.js"></script>
-  <script src="/dist/bootstrap/js/bootstrap.min.js"></script>
-  <script src="/dist/bootstrap-tagsinput/bootstrap-tagsinput.min.js"></script>
-  <script src="/dist/underscore/underscore.js"></script>
-  <script>
-  $(document).ready(function() {
-    jQuery.validator.setDefaults({
-      errorPlacement: function(error, element) {
-        if(element.parent().hasClass('input-prepend') || element.parent().hasClass('input-append')) {
-          error.insertAfter(element.parent());
-        } else {
-          error.insertAfter(element);
-        }
-      },
-      errorElement: "span",
-      errorClass: "help-block",
-      highlight: function(element) {
-        $(element).closest('.form-group').addClass('has-error');
-      },
-      success: function(element) {
-        $(element).closest('.form-group').removeClass('has-error');
-      }
-    });
-  });
-  </script>
-  {{{block "scripts"}}}
-</html>

package/src/saml-idp/views/samlresponse.hbs DELETED Viewed

@@ -1,20 +0,0 @@
-<html>
-<head>
-    <title>Keep Calm and Single Sign-On!</title>
-</head>
-<body>
-    <form method="post" name="hiddenform" action="{{AcsUrl}}">
-        <input type="hidden"
-               name="SAMLResponse"
-               value="{{SAMLResponse}}">
-        <input type="hidden" name="RelayState" value="{{RelayState}}">
-        <noscript>
-            <p>JavaScript is disabled. Click Submit to continue.</p>
-            <input type="submit" value="Submit">
-        </noscript>
-    </form>
-    <script language="javascript" type="text/javascript">
-        window.setTimeout(function(){document.forms[0].submit();}, 0);
-    </script>
-</body>
-</html>

package/src/saml-idp/views/settings.hbs DELETED Viewed

@@ -1,175 +0,0 @@
-<div class="col-md-8 col-md-offset-2">
-  <form id="settings" class="form-settings form-horizontal" role="form" method="POST">
-    <div class="panel panel-default">
-      <div class="panel-heading">
-        <h3 class="panel-title">Identity Provider Settings</h3>
-      </div>
-      <div class="panel-body">
-        <div class="form-group">
-          <label for="issuer" class="col-sm-3 control-label">Issuer</label>
-          <div class="col-sm-9">
-            <input id="issuer" class="form-control" name="issuer" type="text" required="" value="{{idp.issuer}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="signatureAlgorithm" class="col-sm-3 control-label">Signature Algorithm</label>
-          <div class="col-sm-9">
-            <select id="signatureAlgorithm" class="form-control" name="signatureAlgorithm">
-              {{#select idp.signatureAlgorithm}}
-              <option value="rsa-sha1">RSA-SHA1</option>
-              <option value="rsa-sha256">RSA-SHA256</option>
-              {{/select}}
-            </select>
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="digestAlgorithm" class="col-sm-3 control-label">Digest Algorithm</label>
-          <div class="col-sm-9">
-            <select id="digestAlgorithm" class="form-control" name="digestAlgorithm">
-              {{#select idp.digestAlgorithm}}
-              <option value="sha1">SHA1</option>
-              <option value="sha256">SHA256</option>
-              {{/select}}
-            </select>
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="signResponse" class="col-sm-3 control-label">Sign Response</label>
-          <div class="col-sm-9">
-            <select id="signResponse" class="form-control" name="signResponse">
-              {{#select idp.signResponse}}
-              <option value="true">Yes</option>
-              <option value="false">No</option>
-              {{/select}}
-            </select>
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="lifetimeInSeconds" class="col-sm-3 control-label control-label-break">Assertion Lifetime Seconds</label>
-          <div class="col-sm-9">
-            <input id="lifetimeInSeconds" class="form-control" name="lifetimeInSeconds" type="number" required="" value="{{idp.lifetimeInSeconds}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="authnContextClassRef" class="col-sm-3 control-label control-label-break">Authentication Context Class</label>
-          <div class="col-sm-9">
-            <select id="authnContextClassRef" class="form-control" name="authnContextClassRef">
-              {{#select idp.authnContextClassRef}}
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol">InternetProtocol</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword">InternetProtocolPassword</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos">Kerberos</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorUnregistered">MobileOneFactorUnregistered</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwoFactorUnregistered">MobileTwoFactorUnregistered</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorContract">MobileOneFactorContract</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwoFactorContract">MobileTwoFactorContract</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:Password">Password</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport">PasswordProtectedTransport</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSessionv">PreviousSessionv
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:X509">X509</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:PGP">PGP</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:SPKI">SPKI</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:XMLDSig">XMLDSig</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:Smartcard">Smartcard</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI">SmartcardPKI</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:SoftwarePKI">SoftwarePKI</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:Telephony">Telephony</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:NomadTelephony">NomadTelephony</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:PersonalTelephony">PersonalTelephony</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:AuthenticatedTelephony">AuthenticatedTelephony</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:SecureRemotePassword">SecureRemotePassword</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:TLSClient">TLSClient</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken">TimeSyncToken</option>
-              <option value="urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified">unspecified</option>
-              {{/select}}
-            </select>
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="allowRequestAcsUrl" class="col-sm-3 control-label control-label-break">Allow Dynamic Assertion Consumer Service URL</label>
-          <div class="col-sm-9">
-            <select id="allowRequestAcsUrl" class="form-control" name="allowRequestAcsUrl">
-              {{#select idp.allowRequestAcsUrl}}
-              <option value="true">Yes</option>
-              <option value="false">No</option>
-              {{/select}}
-            </select>
-          </div>
-        </div>
-      </div>
-    </div>
-    <div class="panel panel-default">
-      <div class="panel-heading">
-        <h3 class="panel-title">Service Provider Settings</h3>
-      </div>
-      <div class="panel-body">
-        <div class="form-group">
-          <label for="serviceProviderId" class="col-sm-3 control-label">Issuer URI</label>
-          <div class="col-sm-9">
-            <input id="serviceProviderId" class="form-control" name="serviceProviderId" type="text" required="" value="{{idp.serviceProviderId}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="sloUrl" class="col-sm-3 control-label control-label-break">Single Logout Service URL</label>
-          <div class="col-sm-9">
-            <input id="sloUrl" class="form-control" name="sloUrl" type="url" required="" value="{{idp.sloUrl}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="acsUrl" class="col-sm-3 control-label control-label-break">Assertion Consumer Service URL</label>
-          <div class="col-sm-9">
-            <input id="acsUrl" class="form-control" name="acsUrl" type="url" required="" value="{{idp.acsUrl}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="destination" class="col-sm-3 control-label">Assertion Consumer Service Destination</label>
-          <div class="col-sm-9">
-            <input id="destination" class="form-control" name="destination" type="url" required="" value="{{idp.destination}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="recipient" class="col-sm-3 control-label">Assertion Consumer Service Recipient</label>
-          <div class="col-sm-9">
-            <input id="recipient" class="form-control" name="recipient" type="url" required="" value="{{idp.recipient}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="audience" class="col-sm-3 control-label">Audience URI</label>
-          <div class="col-sm-9">
-            <input id="audience" class="form-control" name="audience" type="text" required="" value="{{idp.audience}}">
-          </div>
-        </div>
-        <div class="form-group">
-          <label for="relayState" class="col-sm-3 control-label">Default Relay State</label>
-          <div class="col-sm-9">
-            <input id="relayState" class="form-control" name="RelayState" type="text" value="{{idp.RelayState}}">
-          </div>
-        </div>
-      </div>
-    </div>
-    <div class="form-group">
-      <div class="col-md-12 text-right">
-        <a href="/accounts/saml/" class="btn btn-default input-xlarge">Cancel</a>
-        <button type="submit" class="btn btn-default btn-primary input-xlarge">Save</button>
-      </div>
-    </div>
-  </form>
-</div>

package/src/saml-idp/views/user.hbs DELETED Viewed

@@ -1,261 +0,0 @@
-{{#if authnRequest.id}}
-<div class="col-md-8 col-md-offset-2">
-  <div class="panel panel-primary">
-    <div class="panel-heading">
-      <a aria-controls="collapse-authn-request" aria-expanded="false" data-toggle="collapse" href="#collapse-authn-request">
-      <h3 class="panel-title"><i class="fa fa-code"><span>SAML Authentication Request</span></i> <i aria-hidden="true" class="indicator fa fa-chevron-circle-down pull-right"></i></h3></a>
-    </div>
-    <div class="panel-body collapse" id="collapse-authn-request">
-      <form class="form-horizontal" role="form">
-        <div class="form-group">
-          <label class="col-sm-3 control-label" for="requestId">Request ID</label>
-          <div class="col-sm-9">
-            <p class="form-control-static" id="requestId">{{authnRequest.id}}</p>
-          </div>
-        </div>
-        <div class="form-group">
-          <label class="col-sm-3 control-label" for="issuer">Issuer</label>
-          <div class="col-sm-9">
-            <p class="form-control-static" id="issuer">{{authnRequest.issuer}}</p>
-          </div>
-        </div>
-        {{#if authnRequest.destination}}
-        <div class="form-group">
-          <label class="col-sm-3 control-label" for="destination">Destination</label>
-          <div class="col-sm-9">
-            <p class="form-control-static" id="destination">{{authnRequest.destination}}</p>
-          </div>
-        </div>
-        {{/if}}
-        {{#if authnRequest.acsUrl}}
-        <div class="form-group">
-          <label class="col-sm-3 control-label" for="acsUrl">ACS URL</label>
-          <div class="col-sm-9">
-            <p class="form-control-static" id="acsUrl">{{authnRequest.acsUrl}}</p>
-          </div>
-        </div>
-        {{/if}}
-        {{#if authnRequest.forceAuthn}}
-        <div class="form-group">
-          <label class="col-sm-3 control-label" for="forceAuthn">ForceAuthn</label>
-          <div class="col-sm-9">
-            <p class="form-control-static" id="forceAuthn">{{authnRequest.forceAuthn}}</p>
-          </div>
-        </div>
-        {{/if}}
-        {{#if authnRequest.relayState}}
-        <div class="form-group">
-          <label class="col-sm-3 control-label" for="relayState">Relay State</label>
-          <div class="col-sm-9">
-            <p class="form-control-static" id="relayState">{{authnRequest.relayState}}</p>
-          </div>
-        </div>
-        {{/if}}
-      </form>
-    </div>
-  </div>
-</div>
-{{/if}}
-<div class="col-md-8 col-md-offset-2">
-  <div class="panel panel-primary">
-    <div class="panel-heading">
-      <h3 class="panel-title"><i class="fa fa-code"><span>SAML Assertion</span></i></h3>
-    </div>
-    <div class="panel-body">
-      <form action="/accounts/saml/{{paths.SIGN_IN}}" class="form-horizontal form-profile" method="post" role="form">
-        <div class='form-profile-attributes'>
-          <div class="panel panel-default">
-            <div class="panel-heading">
-              <h3 class="panel-title"><i class="fa fa-user-o"><span>Subject Statement</span></i></h3>
-            </div>
-            <div class="panel-body">
-              <div class="form-group">
-                <label class="col-sm-3 control-label" for="username">Subject NameID</label>
-                <div class="col-sm-9">
-                  <input class="form-control" id="username" name="username" placeholder="user@example.com" required="" value="{{user.username}}">
-                  <p class="help-block"><a aria-controls="collapseNameId" aria-expanded="false" data-toggle="collapse" href="#collapseNameId"><i class="fa fa-plus"><span>More Options</span></i></a></p>
-                </div>
-              </div>
-              <div class="collapse" id="collapseNameId">
-                <div class="form-group">
-                  <label class="col-sm-3 control-label" for="nameIdFormat">Name ID Format</label>
-                  <div class="col-sm-9">
-                    <select class="form-control" id="nameIdFormat" name="nameIdFormat">
-                      <option>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</option>
-                      <option>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</option>
-                      <option>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</option>
-                      <option>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</option>
-                      <option>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</option>
-                      <option>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName</option>
-                      <option>urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos</option>
-                    </select>
-                  </div>
-                </div>
-                <div class="form-group">
-                  <label class="col-md-3 control-label" for="nameIdNameQualifier">Name Qualifier</label>
-                  <div class="col-sm-9">
-                    <input class="form-control" id="nameIdNameQualifier" name="nameIdNameQualifier" type="text" value="{{user.nameIdNameQualifier}}">
-                  </div>
-                </div>
-                <div class="form-group">
-                  <label class="col-md-3 control-label" for="nameIdSPNameQualifier">Service Provider Name Qualifier</label>
-                  <div class="col-sm-9">
-                    <input class="form-control" id="nameIdSPNameQualifier" name="nameIdSPNameQualifier" type="text" value="{{user.nameIdSPNameQualifier}}">
-                  </div>
-                </div>
-                <div class="form-group">
-                  <label class="col-md-3 control-label" for="nameIdSPProvidedID">Service Provider Provided ID</label>
-                  <div class="col-sm-9">
-                    <input class="form-control" id="nameIdSPProvidedID" name="nameIdSPProvidedID" type="text" value="{{user.nameIdSPProvidedID}}">
-                  </div>
-                </div>
-              </div>
-            </div>
-          </div>
-          <div class="panel panel-default">
-            <div class="panel-heading">
-              <a aria-controls="collapse-authn-request" aria-expanded="false" data-toggle="collapse" href="#collapse-authn-statement">
-              <h3 class="panel-title"><i class="fa fa-lock"><span>Authentication Statement</span></i> <i aria-hidden="true" class="indicator fa fa-chevron-circle-down pull-right"></i></h3></a>
-            </div>
-            <div class="panel-body collapse" id="collapse-authn-statement">
-              <div class="form-group">
-                <label class="col-sm-3 control-label" for="sessionIndex">Session Index</label>
-                <div class="col-sm-9">
-                  <p class="form-control-static" id="sessionIndex">{{participant.sessionIndex}}</p>
-                </div>
-              </div>
-              <div class="form-group">
-                <label class="col-sm-3 control-label" for="authnContextClassRef">Authentication Context Class</label>
-                <div class="col-sm-9">
-                  <p class="form-control-static" id="authnContextClassRef">{{idp.authnContextClassRef}}</p>
-                </div>
-              </div>
-            </div>
-          </div>
-          <div class="panel panel-default">
-            <div class="panel-heading">
-              <h3 class="panel-title"><i class="fa fa-id-card-o"><span>Attribute Statements</span></i></h3>
-            </div>
-            <div class="panel-body">
-              {{#each metadata}}
-              <div class="form-group">
-                <label class="col-sm-3 control-label" for="{{this.id}}">{{this.displayName}}</label>
-                <div class="col-sm-9">
-                  {{#if this.options}}
-                  <select class="form-control" id="{{this.id}}" name="{{this.id}}">
-                  {{#each this.options}}
-                    <option>
-                      {{this}}
-                    </option>
-                  {{/each}}
-                  </select>
-                  {{else}}
-                    {{#if this.multiValue}}
-                      <input class="form-control" id="{{this.id}}" name="{{this.id}}" placeholder="Attribute value" type="text" value="{{getProperty this.id ../user}}" data-role="tagsinput">
-                    {{else}}
-                      <input class="form-control" id="{{this.id}}" name="{{this.id}}" placeholder="Attribute value" type="text" value="{{getProperty this.id ../user}}">
-                    {{/if}}
-                  {{/if}}
-                </div>
-              </div>
-              {{/each}}
-            </div>
-          </div>
-          <div class="form-group">
-            <div class="col-md-12 text-right">
-              <button id="btn-show-attribute-modal" class="btn btn-default input-xlarge"><i class="fa fa-plus-circle"><span>Add attribute</span></i></button>
-              <button id="btn-sign-out" class="btn btn-default input-xlarge"><i class="fa fa-sign-out"><span>Sign out</span></i></button>
-              <button id="btn-sign-in" class="btn btn-primary input-xlarge" type="submit"><i class="fa fa-sign-in"><span>Sign in</span></i></button>
-            </div>
-          </div>{{#if authnRequest.id}} <input name="_authnRequest" type='hidden' value='{{serialize authnRequest}}'> {{/if}}
-        </div>
-      </form>
-    </div><!-- /.form-profile-attributes -->
-  </div>
-</div>
-<div class="modal fade" id="modal-attribute">
-  <div class="modal-dialog">
-    <div class="modal-content">
-      <div class="modal-header">
-        <button aria-label="Close" class="close" data-dismiss="modal" type="button"><span aria-hidden="true">&times;</span></button>
-        <h4 class="modal-title">Add Attribute</h4>
-      </div>
-      <div class="modal-body">
-        <form class="form-horizontal" role="form">
-          <div class="form-group">
-            <label class="col-md-3 control-label" for="attributeName">SAML Attribute Name</label>
-            <div class="col-sm-9">
-              <input class="form-control" name="attributeName" required="" type="text">
-            </div>
-          </div>
-          <div class="form-group">
-            <label class="col-md-3 control-label" for="name">Name</label>
-            <div class="col-sm-9">
-              <input class="form-control" name="name" required="" type="text">
-            </div>
-          </div>
-          <div class="form-group">
-            <label class="col-md-3 control-label" for="description">Description</label>
-            <div class="col-sm-9">
-              <input class="form-control" name="description" type="text">
-            </div>
-          </div>
-          <div class="form-group">
-            <label class="col-md-3 control-label" for="attributeValueOption">Attribute Value</label>
-            <div class="col-sm-9">
-              <label class="radio-inline"><input checked name="valueType" type="radio" value="single">Single Value</label> <label class="radio-inline"><input name="valueType" type="radio" value="multi">Multi-Value</label>
-            </div>
-          </div>
-        </form>
-      </div>
-      <div class="modal-footer">
-        <button class="btn btn-default" data-dismiss="modal" type="button">Close</button> <button class="btn btn-primary" type="button">Add attribute</button>
-      </div>
-    </div><!-- /.modal-content -->
-  </div><!-- /.modal-dialog -->
-</div><!-- /.modal -->
-{{#extend "scripts"}}
-<script>
-$(document).ready(function() {
-   $("#nameIdFormat option").filter(function() {
-       return $(this).text() == '{{user.nameIdFormat}}';
-   }).prop('selected', true);
-   $('#btn-show-attribute-modal').click(function(e) {
-     e.preventDefault();
-     var $modal = $('#modal-attribute');
-     $modal.find('input[type=text]').val('');
-     $modal.modal('show');
-   });
-  $('#btn-sign-out').click(function(e) {
-    e.preventDefault();
-    window.location.href = '/accounts/saml/{{paths.SIGN_OUT}}';
-  });
-   $('#modal-attribute .btn-primary').click(function(e) {
-     e.preventDefault();
-     var $form = $("#modal-attribute form");
-     $form.validate();
-     if ($form.valid()) {
-       $.ajax({
-         type: "POST",
-         url: '/accounts/saml/{{paths.METADATA}}',
-         data: $("#modal-attribute form").serialize(),
-         success: function() {
-           $('#modal-attribute').modal('hide');
-           window.location.reload();
-         },error: function(xhr, textStatus, errorMessage) {
-          console.log(errorMessage);
-         }
-       });
-     }
-   })
-   $('a[data-toggle=collapse]').click(function() {
-     $(this).find('i.indicator').toggleClass('fa-chevron-circle-down fa-chevron-circle-up');
-   });
-});
-</script>{{/extend}}